WO2024175233A1 - Dispositif d'alimentation en énergie d'au moins une charge associée à la securite dans un vehicule automobile - Google Patents

Dispositif d'alimentation en énergie d'au moins une charge associée à la securite dans un vehicule automobile Download PDF

Info

Publication number
WO2024175233A1
WO2024175233A1 PCT/EP2023/084837 EP2023084837W WO2024175233A1 WO 2024175233 A1 WO2024175233 A1 WO 2024175233A1 EP 2023084837 W EP2023084837 W EP 2023084837W WO 2024175233 A1 WO2024175233 A1 WO 2024175233A1
Authority
WO
WIPO (PCT)
Prior art keywords
driver stage
current
switch
supply
safety
Prior art date
Application number
PCT/EP2023/084837
Other languages
German (de)
English (en)
Inventor
Michael Muerken
Nils Draese
Original Assignee
Robert Bosch Gmbh
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Robert Bosch Gmbh filed Critical Robert Bosch Gmbh
Publication of WO2024175233A1 publication Critical patent/WO2024175233A1/fr

Links

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/03—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for supply of electrical power to vehicle subsystems or for

Definitions

  • Device for supplying energy to at least one safety-relevant consumer in a motor vehicle
  • the invention relates to a device for supplying energy to a safety-relevant consumer in a motor vehicle according to the preamble of the independent claim.
  • a method for configuring an on-board network of a motor vehicle wherein at least one consumer is provided in the on-board network, wherein in the context of the configuration of the on-board network at least one of the at least one consumers is assigned an electrical module, which in turn is selected from a module group, wherein in the selection of the electrical module a first consumer criterion, which relates to a supply requirement of the at least one consumer, and a second consumer criterion, which relates to a degree of reaction of the at least one consumer, are taken into account.
  • the invention is based on the object of specifying a device which further increases the reliability of a power supply with a simple structure. The object is achieved by the features of the independent claim.
  • a redundant supply concept for the switch controls can be achieved.
  • This enables independent supplies of the driver stages to be achieved, so that the reliability of the energy supply and protection of safety-relevant consumers is further increased.
  • This enables certain safety-relevant requirements for a safety concept qualified according to ASIL, in particular ASIL C (for example according to DIN ISO26262) to be met.
  • the proposed solution can provide redundant supplies for a large number of controls for corresponding switches, while only two supply paths with corresponding driver stages still have to be used. This simplifies the circuitry effort required to control a large number of switches.
  • At least one current limiter is arranged between at least one of the inputs of the auxiliary voltages and at least one of the controls. This ensures that any errors in the driver stage or control or the switch (or in the partial switching elements connected in parallel) do not have a critical effect on the supply, in particular for the control.
  • the central current limitation is connected between the input for the respective auxiliary voltage and the respective gen driver stage and/or the particularly decentralized current limitation is arranged between the respective coupling element and the driver stages. It is possible to choose individually between a decentralized and a centralized current limitation, whereby a decentralized limitation is necessary in order to protect errors in one switch from passing through to the other switches.
  • one of the driver stages is designed as a maintenance driver stage and/or one of the driver stages is designed as a pulse driver stage, used in particular when starting the motor vehicle.
  • the pulse capability enables the driver stage to quickly transfer the switches from the blocked to the conductive state.
  • the provision of a further driver stage, namely an independent maintenance driver stage can prevent any repercussions of the switches on the auxiliary voltage supply and thus on the drivers of other switching stages in the event of a fault by implementing a high-impedance connection for charge maintenance for the individual switches.
  • the maintenance driver stage is arranged in one of the supply paths, the central current limiter and the pulse driver stage are arranged in the other supply path, with the decentralized current limits being arranged between the maintenance driver stage and the respective coupling elements.
  • the central current limiter as the central current limiter, rapid switching on from the buffer can be achieved, which prevents error propagation from errors in the supply path to the central driver voltage.
  • At least two independent control signals are provided, which switch on at least one of the Switches, and/or at least two independent control signals are provided which, when there is a matching switch-off request, in particular when coupled together via an AND link, cause at least one of the switches to be switched off.
  • This means that the corresponding control inputs are each able to maintain the conductive state of the switch by switching through the driver stage.
  • Single-fault safety is also achieved by providing two independent control inputs which are only able to switch the switch to the non-conductive state together. This single-fault safety enables particularly sophisticated safety concepts to be implemented.
  • At least a third switch is provided with an associated control, in particular a gate control, wherein the control is supplied via a third coupling element from both supply paths and/or wherein at least two switches are arranged in parallel to one another.
  • a third coupling element from both supply paths and/or wherein at least two switches are arranged in parallel to one another.
  • one of the auxiliary voltages is fed to the control, in particular the gate control, via at least one decoupling element. This ensures that no single error leads to an unintentional shutdown (becoming high-resistance).
  • the AND connection is fed by at least one of the auxiliary voltages, whereby if there are matching shutdown requests as control signals, the respective control is supplied with the auxiliary voltage, in particular via at least one decoupling element, preferably a diode.
  • the diode decoupling prevents errors in a switch or partial switching element from causing all other switches or partial switching elements to be switched off.
  • the pulse driver stage comprises at least one electrical buffer, in particular a capacitor, in particular having a multiple of the system-immanent capacitance of a switch designed as a field effect transistor, in particular a MOSFET, and/or that the pulse driver stage comprises at least one current source and/or that the pulse driver stage comprises at least one switching means for recharging a buffer or capacitor and/or that the pulse driver stage comprises at least one limiting resistor and/or that the pulse driver stage is set up to initiate switching on of the switches using the buffer, and/or that a control signal for a switching means which is part of a constant current source of the pulse driver stage is fed from a buffer or pulse memory.
  • This enables particularly fast switching on, which is of great importance in the automotive sector in particular.
  • the current limitation comprises at least one resistor and/or a current source, in particular a constant current source, and/or an RC element and/or a buffered current limitation.
  • a resistor that is chosen high enough that in the event of a short circuit at the input of a switch, the effect on the driver voltage or, in the case of the decentralized solution, on the other switches is prevented is sufficient.
  • a central current limitation can be dispensed with.
  • an RC combination can also be used.
  • the buffers of the current limitations are particularly suitable for central current limitation, which allow the respective supply path to switch on quickly from the buffer, but prevent errors in the supply thread from propagating to the central driver voltage.
  • the monitoring devices each expediently comprise at least one measuring amplifier for recording the respective characteristic value, at least one comparator to which an output value of the respective measuring amplifier is fed, and a storage element to which an output value of the comparator is fed, redundant operation can be achieved in a simple manner.
  • Safety-relevant consumers are only switched off if higher-level safety objectives require it, for example for reasons of component protection or power. This ensures a safe supply against single faults while maintaining the safety objective. A single fault in a switch does not lead to the immediate shutdown of the supply path or the consumer. This leads to low overall costs with the same reliability and safety level.
  • Figure 1 shows an example of an embodiment of the power distributor that connects two sub-board networks
  • Figure 2 is a block diagram of a fail-safe power supply of an output for a particularly safety-relevant consumer
  • Figure 3 shows a more detailed embodiment of a single-fault-safe current measurement
  • Figure 4 is a schematic representation of the redundant operation
  • Figure 6 shows a possible circuit implementation of the redundant driver concept.
  • Figure 1 shows a possible topology of an energy supply system, consisting of an on-board network 13, which includes an energy storage device 12, in particular a battery 12 with associated sensor 14, preferably a battery sensor, and several, in particular, safety-relevant consumers 16, which are supplied and protected by an electrical power distributor 18.
  • the consumers 16 are special consumers with high requirements or a high need for protection, generally referred to as safety-relevant consumers 16.
  • safety-relevant consumers 16 are, for example, an electric steering and/or a braking system as components that absolutely have to be supplied in order to ensure that the vehicle can be steered and/or braked in the event of a fault.
  • the on-board network 13 consists of a safety-relevant sub-network 11 and a non-safety-relevant sub-network 10.
  • the safety-relevant sub-network 11 can be separated from the non-safety-relevant sub-network 10 by the power distributor 18, in particular in the event of a fault or a critical state of the non-safety-relevant sub-network 10.
  • the safety-relevant sub-network 11 is, for example, a sub-network 11 qualified according to ASIL, in particular ASIL C (for example according to DIN ISO26262), which comprises at least one of the safety-relevant consumers 16 and can optionally be equipped with its own energy storage device 12 for voltage support.
  • the non-safety-relevant sub-network 10 comprises at least one non-safety-relevant consumer 17, for example it can be a so-called QM consumer or consumer whose safety integrity is classified as QM. However, it is not excluded that at least one further safety-relevant consumer can be arranged in the non-safety-relevant sub-network 10, for example in the case of a redundant design of the safety-relevant consumers.
  • the non-safety-relevant sub-network 10 is a non-ASIL-qualified on-board network.
  • the energy storage device 12 is connected to a connection (terminal KL30_1) of the power distributor 18.
  • the sensor 14 is able to measure an electrical parameter such as a voltage Ub at the energy storage device 12 and/or a current Ib through the energy storage device 12 and/or a temperature ture Tb of the energy storage device 12.
  • the sensor 14 can determine, for example, the charge state SOC of the energy storage device 12 or other parameters of the energy storage device 12 from the determined electrical parameters llb, Ib, Tb.
  • a further supply branch for at least one further consumer 25 can optionally be provided.
  • the consumer 25 is, for example, protected by a fuse 23.
  • Further consumers 25 can also be provided, which can also be protected by fuses 23. These consumers 25 are those that should still be supplied with energy from the energy storage device 12 even when the switching device 19 in the power distributor 18 is disconnected or opened, preferably those safety-critical consumers 25 that are critical with regard to disruptions in relation to the security of supply or consumers classified as QM that must meet certain requirements after an accident.
  • An (optional) safety-relevant or safety-critical on-board network path or sub-on-board network 11 is therefore connected to the connection KL 30 _1.
  • the power distributor 18 can be able to determine corresponding parameters such as voltage Uv, current Iv of the consumers 16.
  • the power distributor 18 can determine corresponding parameters of the energy storage device 12 such as voltage Ub and/or current Ib and/or temperature Tb.
  • the power distributor 18 could contain the corresponding sensors or receive the data from the sensor 14.
  • the power distributor 18 also has corresponding evaluation means 21 such as a microcontroller 21 to store or evaluate recorded variables.
  • the evaluation means 21 is used to determine critical states, in particular of the safety-relevant sub-vehicle network 11, such as detecting an overcurrent and/or an undervoltage or overvoltage on the sub-vehicle network 11 for the safety-relevant consumer 16, 25.
  • corresponding parameters are recorded and compared with suitable threshold values.
  • a microcontroller for example, is used as the evaluation means 21.
  • the microcontroller or the evaluation means 21 is also able to control corresponding switch units 15 as described in more detail below.
  • a switch unit 15 supplies the safety-relevant consumer 16 connected to it with a Distribution point, for example busbar 60 or backbone, provided energy or the supply voltage U1.
  • a Distribution point for example busbar 60 or backbone, provided energy or the supply voltage U1.
  • three switching units 15 are provided, each of which supplies the corresponding safety-relevant consumers 16 with energy via the outputs 66.
  • the on-board network 13 has a lower voltage level U1 than an optionally provided high-voltage on-board network 20; for example, it can be a 14 V on-board network.
  • a DC-DC converter 22 is arranged between the on-board network 13 and the high-voltage on-board network 20.
  • the high-voltage on-board network 20 includes, for example, an energy storage device 24, for example a high-voltage battery, possibly with an integrated battery management system, shown as an example a load 26, for example a comfort consumer such as an air conditioning system or refrigerant compressor etc. supplied with a higher voltage level, and an electric machine 28.
  • high voltage is understood to mean a voltage level U2 that is higher than the voltage level U1 of the basic on-board network 13.
  • the high-voltage electrical system 20 could be omitted entirely.
  • a battery or accumulator is described in the embodiment as a possible energy storage device 12, 24.
  • other energy storage devices suitable for this task for example on an inductive or capacitive basis, fuel cells, capacitors or similar, can equally be used.
  • the embodiment according to Figure 2 discloses, by way of example, a switch unit 15 (or possibly a disconnector 19) with at least one, possibly two, preferably three switch(es) 61, 62, 63 connected in parallel, via which the connection 66 for a safety-relevant consumer 16 can be supplied and secured with energy provided by an energy supply 60, in particular supply voltage U1.
  • a switch unit 15 or possibly a disconnector 19
  • switches 61, 62, 63 connected in parallel, via which the connection 66 for a safety-relevant consumer 16 can be supplied and secured with energy provided by an energy supply 60, in particular supply voltage U1.
  • Each of the parallel-connected switches 61, 62, 63 is in each case part of a supply path 64.
  • the energy supply 60 in particular a backbone (distribution point with supply line or busbar in an on-board network of a motor vehicle), and the parallel-connected switches 61, 62, 63, at least one and, depending on the power requirement, two measuring resistors 70, 72 connected in parallel are provided.
  • other measuring means for example inductive, etc., could also be used.
  • the respective potentials before and after the measuring resistor 70 are fed via series resistors 74, 76 to a measuring amplifier 78 (current measurement via a current amplifier or CSA (Current Sense Amplifier)).
  • the series resistors 74, 76 are not absolutely necessary, but they prevent reflections (signal interference). This is a so-called series termination.
  • the measuring amplifier 78 is supplied with energy via a supply input 80 with a supply voltage 89, preferably with a first supply voltage V1 (logic supply or logic voltage: for example voltages of 5 V or 3.3 V, etc.).
  • the output signal of the measuring amplifier 78 is fed to a comparator 82, for example to its plus input as shown in Figure 2.
  • This output signal of the measuring amplifier 78 is compared with a limit value 84, which is fed to the negative input of the comparator 82.
  • the comparator 82 compares the two input signals with each other. If the difference between the two signals (voltages) is either positive or negative, the output of the comparator 82 changes its polarity.
  • the comparator 82 is used to detect an overcurrent through the measuring resistor 70 or the measuring resistors 70, 72.
  • the limit value 84, 130 could, for example, be formed from two reference sources.
  • One of the limit values 84, 130 could be specified by a microcontroller 21, for example by means of a PWM signal and low-pass filter or by means of a digital-analog output (DAC).
  • the other limit value 130 should be implemented by an independent reference source.
  • a discrete circuit can be used for this, for example by means of a voltage divider, Zener diode or by means of integrated circuits (for example a band gap reference).
  • the reference sources must be supplied from different and independent voltage sources (or supplies 89, 131). It is also conceivable to supply each reference source from both supply voltages 89, 131. Both supply voltages 89, 131 must be coupled to one another without feedback and, for example, via diodes and/or resistors (current limiting) or generally via an element to ensure freedom from feedback 141 (see Fig. 3). Both reference signals for generating the limit value 84, 130 must be superimposed in such a way that a minimum threshold or minimum limit value 84, 130 remains after the failure of a reference source.
  • the comparator 82 is supplied with a supply voltage 89, 131, preferably with the first supply voltage V1, via a supply input 86.
  • An output signal 87 of the comparator 82 is fed to a storage element 88, for example a flip-flop.
  • the storage element 88 could also be implemented as software. If the measured difference at the measuring resistor 70 and 72 is above or, depending on the method used, below the corresponding limit value 84, the comparator 82 generates a corresponding output signal 87 (for example, overcurrent detected; switching unit 15 opens "off” for protection) or a change in the logical state of the output signal 87. If an overcurrent is detected, the output signal 87 leads to a change in polarity at the output 92 (this can mean, for example, an overcurrent detected at the measuring resistor 70; as a result, the switching unit 15 should open for protection). A reset of the output 92 of the memory element 88 could, for example, be done via the microcontroller 21.
  • the memory element 88 has a supply input 90, via which the memory element 88 is supplied with a supply voltage 89, preferably with a redundant supply voltage.
  • the output signal 92 of the memory element 88 is fed to a driver 94.
  • the output signal 92 of the memory element 88 is the off signal, which causes the respective switches 61, 62, 63 to be switched off (opened) in the event of an overcurrent via a respective output signal 114, 116 of the driver 94.
  • Plausibility checks can be provided as part of the driver 94, via which it is determined whether the switching unit 15 with associated switches 61, 62, 63 should actually be switched off.
  • this plausibility check can be carried out by a corresponding logical and/or combination (AND combinations designated 180 or 230 in the following embodiments) with further signals, in the embodiment according to Figure 2, for example, with an output signal 108 of a further memory element 134 as described below.
  • This plausibility check logic is integrated in the driver 94 in the embodiment according to Figure 2.
  • At least the memory device 88, at least the comparator 82 and at least the measuring amplifier 78 are components of a monitoring device 140 indicated as a block.
  • a driver voltage is supplied to the driver 94 via an input 96 and/or a further driver voltage, independent of the driver voltage supplied via the input 96, is supplied via a further input 98. Both supply voltages, also referred to as auxiliary voltages 137, 139, must be connected to one another without any feedback. The more precise design is shown in Figures 5 and 6.
  • the driver 94 generates further output signals 110, 112, which cause the respective switches 61, 62, 63 to be switched on.
  • the output signal 110 activates the first switch 61
  • the output signal 112 activates the second switch 62, etc.
  • the driver 94 generates corresponding output signals for switching off the respective switches 61, 62, 63.
  • the output signal 114 is used to switch off the first switch 61
  • the output signal 116 is used to switch off the second switch 62, etc. This is done via the respective drivers 67, 68, 69 for the respective switches 61, 62, 63.
  • a temperature shutdown can also be carried out in the event of an overtemperature via the driver(s) 67, 68, 69.
  • a corresponding temperature detection 118 of the switching unit 15 can optionally be provided.
  • a redundant input signal 102 is generated for the driver 94 and made available to the driver 94 via an element 100 (for generating a redundant input signal "On"), for example another microcontroller, a register memory or the like.
  • the input signal 102 can be a switch-on signal (On) for the switching unit 15.
  • An output signal from the microcontroller 21 can be fed to the element 100 via an input 104.
  • a further input signal 106 is provided for the driver 94, which can be provided by the microcontroller 21, namely a switch-on signal (On) for the switching unit 15.
  • the two switch-on signals 102, 106 are ORed with one another.
  • the driver stage 94 If there is at least one switch-on request via one of the signals 102, 106, the driver stage 94 generates corresponding switch-on signals 110, 112 for the switches 61, 62, 63.
  • the output signal of the further measuring amplifier 124 is fed to a (further) comparator 128.
  • the comparator 128 compares the supplied output signal with a limit value 130 that is made available to the comparator 128 at its input.
  • the comparator 128 is used to detect overcurrent of the current flowing through the switching unit 15 if this exceeds the limit value 130.
  • the limit value 130 to increase the single fault safety can in turn be formed from two shutdown thresholds. For example, one of the shutdown thresholds could be specified by the controller 21.
  • the further shutdown threshold could be specified by another hardware circuit, possibly supplied by another supply voltage V2.
  • Appropriate circuits can be used to generate the limit value 84, 130.
  • the change in the limit value 84 which leads to a change in polarity at the output of the comparator 82 when the measured variable remains the same, must be prevented with sufficient measures.
  • the limit value 84, 130 could be formed from two reference sources, for example.
  • One of the limit values 84, 130 could be specified by a microcontroller 21, for example by means of a PWM signal and low-pass filter or by means of a digital-analog output (DAC).
  • the other limit value 130 should be implemented by an independent reference source.
  • a discrete circuit can be used for this, for example by means of a voltage divider, Zener diode or by means of integrated circuits (for example band gap reference). Both specification options are coupled, for example via element 141 (as shown by way of example in Figure 3) to ensure freedom from feedback, for example via diodes and resistors, to a voltage divider, which provides the corresponding voltage signal for the overcurrent threshold to the input of the comparator 128.
  • element 141 as shown by way of example in Figure 3
  • single errors such as a failure of the limit value 84, 130 provided by the microcontroller 21 or the failure of the limit value 84, 130 provided by the additional hardware do not lead to a shutdown of the power stage or switches 61, 62, 63.
  • the comparator 128 comprises a supply input 132, via which the comparator 128 is supplied with the supply voltage 131, in particular with the further supply voltage V2. If the output signal at the If the measuring amplifier 124 exceeds the limit value 130, the comparator 128 generates a corresponding output signal 133, which is fed to a further storage element 134, in particular a flip-flop, and leads to the setting of the corresponding output 108 (switching off the switching unit 15 “off”).
  • the further storage element 134 is supplied with energy via a supply input 136 with a supply voltage 131, in particular with the further supply voltage V2.
  • the output signal 108 of the further storage element 134 is in turn fed to the driver 94.
  • At least the additional memory device 134, at least the additional comparator 128 and at least the additional measuring amplifier 124 are components of an additional monitoring device 142 indicated as a block.
  • the plausibility of the switch-off request 108 is checked via the output signal 92 of the storage element 88 and vice versa. If both output signals 92, 108 of the storage elements 88, 134 signal a switch-off request, the switch unit 15 is switched off.
  • the plausibility check or, if necessary, further plausibility check of an error detected via the measuring resistor 70 can be carried out using the resistance between drain and source Rds on the MOSFET via the described measurement and software evaluation. It may be possible to dispense with the measurement via the switch (RDSon measurement) completely.
  • An element 141 for ensuring freedom from feedback and decoupling can have two branches of resistors and diodes connected in series, with the two branches being connected to one another on the output side. The diodes are connected in such a way that they only allow current to flow from the input side, namely from the two input signals to be linked, to the output side. This ensures freedom from feedback.
  • the resistors are intended to limit the current and are suitably dimensioned for this purpose depending on the requirements.
  • the concept provides for a technical implementation of a single-fault-safe current measurement with latent error detection, whereby a single error in the current measurement does not lead to a violation of the safety objective of "safe supply".
  • a latent error of the switches 61, 62, 63 in the power stage can be detected.
  • the monitoring device 140 comprises the measuring amplifier 78, the comparator 82 and the storage element 88.
  • the limit value is formed by a voltage divider 232, redundantly supplied by supplies 89, 131, non-reactively coupled to one another via the element 141, and fed to one input of the comparator 82.
  • the further monitoring device 142 comprises the measuring amplifier 178, the further comparator 128 and the storage element 134.
  • the limit value of the further comparator 128 is redundantly supplied by the supply 89, 131 via a voltage divider 232.
  • Corresponding output signals of the measuring amplifiers 82, 178 are also tapped and fed to the microcontroller 21 for further evaluation.
  • the block diagram in Figure 4 summarizes the underlying concept for meeting the requirements of safe supply and safe separation with the appropriate integrity.
  • the redundant operation is characterized by at least two independent and mutually non-reactive and decoupled control paths of the switching elements 61, 62, 63.
  • all necessary supply voltages 89, 131 or auxiliary voltages 137, 139 if their failure could cause a violation of a safety objective, must be implemented redundantly.
  • all of the components shown in Figure 4 must be components with one or both of the redundant sources.
  • each source is connected via an element 141 to ensure freedom from feedback and decoupling. This prevents feedback and suppresses further cross effects.
  • the microcontroller 21 as the main processor is supplied with the required operating and reference voltages, for example, from the sources of the supply 89 and another auxiliary computer 100 from the sources of the additional supply 131.
  • the embodiment according to Figure 4 is characterized by a highly integrated driver circuit. This means that the number of components required for control can be reduced to a minimum.
  • the introduction of a pulse driver stage 146 and a maintenance driver stage 144 enables the non-reactive use of the auxiliary voltage supplies.
  • a single error for example a short circuit of the gate (driver 67, 68, 69) of a power semiconductor (switch 61, 62, 63) to source, still leads at most to the loss of one of the switches 61, 62, 63, whereby the remaining switches 61, 62 are still available.
  • a single error of the switch-off signal 92, 108 does not lead to the switching unit 15 being switched off.
  • a single error in the event of a failure of the microcontroller 21 does not lead to the channel being switched off, since the switch-on signal 102 is buffered in the auxiliary computer or register 100.
  • the two supplies 89, 131 can be designed with different power levels, since the additional supply voltages connected to them are connected in such a way that the supply path 64 can maintain emergency operation if necessary, but does not guarantee commissioning or rapid switching on (for example due to a high-impedance and a low-impedance connection to one of the two supplies 89, 131). In the event of a single error, one of the two sources can therefore always be used.
  • supplies 89, 131 are either switched off or relieved for a low quiescent current consumption. This ensures that the restrictive quiescent current requirements and a fast wake-up are met, and in particular that operational readiness is ensured quickly. If output channels with safety integrity are switched on quickly (fast wake-up), diagnostic functions may have to be carried out until the necessary safety integrity of the connected consumer is provided. This means that full performance is ensured very quickly ( ⁇ 1ms) and full safety integrity is ensured. Integrity after the microcontroller 21 has been booted up and the diagnostic functions provided for the switching unit 15 and the overall system have been carried out. The duration can be, for example, ⁇ 250 ms. If all diagnostic results are within the specified ranges, the entire system can be assured of full safety integrity and, for example, the immediate start of the journey can be made possible.
  • Two independent logic or control units (for example, main computer 99 such as a microcontroller 21 and an auxiliary computer 100 such as a register memory) provide the status information and the control information of the output channels or supply paths 64 redundantly.
  • main computer 99 such as a microcontroller 21
  • auxiliary computer 100 such as a register memory
  • the auxiliary computer 100 in the simplest case just an independent status and control register, can maintain the current operating state and control signals independently of the main computer 99 or its supply in the event of a fault.
  • the corresponding output signals (output signal 102 of the auxiliary computer 100, output signal 106 of the microcontroller 21) both reach the driver 94 for the switching unit 15.
  • Two independent monitoring devices 140, 142 (as described by way of example for Figures 2 - 3) are provided, which independently monitor the state of the supply paths 64 (between 60 and 66) for errors such as overload in order to request a disconnection of the conductive connection between input 60 and output 66 in the event of an error.
  • the independence must ensure that there are no (or only reasonably unlikely) error cases in which both monitoring devices 140, 142 incorrectly request a disconnection at the same time.
  • the protective devices 140, 142 comprise corresponding measuring resistors 70, 72, 73 or voltage taps on the switching means 61, 62, 63, corresponding measuring amplifiers 78, 124, 178 and/or corresponding comparators 82, 128 for evaluating the measuring signals of the measuring amplifiers 78, 124, 178 and/or corresponding storage elements 88, 134 for temporarily storing certain status information and/or corresponding logic elements 180 for checking the plausibility of a switch-off request or a
  • the monitoring device 140 and the further monitoring device 142 each comprise the memory device 80, 134 (not shown separately), the comparator 82, 128 (not shown separately) and at least the measuring amplifier 78, 124, 178 (not shown).
  • driver stages 67, 68, 69, etc. and switches 61, 62, 63, etc. are provided which are decoupled from one another.
  • the switches 61, 62, 63, etc. serve to provide the low-impedance connection between the main supply 60 and the output 66 for supplying the connected consumer by connecting, for example, MOSFETs or IGBTs in parallel as power switches in the respective supply paths 64.
  • the driver stages 67, 68, 69 are internally constructed in such a way that one of the two independent logic units 99, 100 is able to initiate or maintain the conductive status.
  • the pulse driver stage 146 shown in the example is able to quickly transfer the switches 61, 62, 63 from the blocked to the conductive state due to its pulse capability.
  • connection close to the switch ensures that a minimum of switch-specific components is achieved.
  • the number of switches n is selected such that the high-resistance failure of one of the partial paths or supply paths 64.1 ... n for a sufficiently long fault tolerance time does not endanger the safety objective of a reliable supply of the loads connected to the output 66, in particular safety-relevant consumers 16.
  • the drivers 67, 68, 69 ensure through their special internal structure that even errors in a single switch 61 do not have any negative effects on other switches 62, 63, 63n, which violates the safety objective of providing a sufficiently low-resistance connection (in the implementation, for example, a short circuit between gate and source, which must be encapsulated within the driver 67, 68, 69 in order to prevent it from affecting the other switches 62, 63, 63n).
  • a redundantly supplied ground concept is provided, indicated by a ground 148 and a further ground 150. This ensures that the internal reference ground of the control unit has a sufficiently high overall availability.
  • FIG. 5 shows a redundant driver concept.
  • This driver concept is used, for example, in the driver 94 according to Figure 2.
  • This comprises two redundantly constructed supply paths 248, 250.
  • One supply path 248 is fed by the auxiliary voltage 137.
  • the other supply path 250 is fed by the other auxiliary voltage 139.
  • the two auxiliary voltages 137, 139 are independent of one another, which ensures an independent supply of the drivers 67, 68, 69 or the associated switches 61, 62, 63.
  • the auxiliary voltage 137 can preferably be active when the microcontroller 21 is active.
  • the trickle charge can be implemented via the auxiliary voltage 137 as described below.
  • the auxiliary voltage also serves 137 in particular for supplying the internal peripherals.
  • the additional auxiliary voltage 139 can preferably be permanently active, in particular to enable a quick start of the motor vehicle.
  • a current measurement 252 is provided for the auxiliary voltage 137.
  • a further current measurement 262 is provided for the additional auxiliary voltage 139.
  • the respective output signals of the current measurements 252, 262 are fed to a diagnosis 268.
  • the diagnosis 268 is used to diagnose driver errors or gate errors.
  • a particularly central current limiter 254 can optionally be provided.
  • a particularly central further current limiter 264 is provided.
  • a resistor 254.1 could be provided as a possible current limiter 254, 264.
  • the resistor 254.1 is selected to be high enough that in the event of a short circuit at the input of an individual switching element or switch 61, 62, 63, the effect on the driver voltage or auxiliary voltage 137, 139 is prevented.
  • an RC element 254.2 can also be used as a current limiter 254, 264.
  • the auxiliary voltage 137 which may be provided by a driver stage 256, possibly designed as a maintenance driver stage 144 or as an activation driver stage or pulse driver stage 146, is fed to a current limiter 270.1, 270.2, 270.n, which may be provided, in particular a decentralized current limiter.
  • the respective current limiter 270.1, 270.2, 270.n which may be provided, in particular a decentralized current limiter, is assigned to a driver 67, 68, 69 or control 281, 282, 283, in particular a gate control (as a component of the respective drivers 67, 68, 69), for the associated switching means 61, 62, 63.
  • the auxiliary voltage 137 which may be provided by the further driver
  • the additional auxiliary voltage 139 or driver voltage provided by the further driver stage 266 is fed to a possibly provided further, in particular decentralized current limiter 272.1 for the control 281 of the first switching means 61.
  • the auxiliary voltage 137 or driver voltage provided or forwarded by the driver stage 256 is fed to a possibly provided particularly decentralized n-th current limiter 270.n, which is assigned to a respective control 283 for the associated n-th switching means 63.
  • the additional auxiliary voltage 139 or driver voltage provided or forwarded by the additional driver stage 266 is fed to a possibly provided further particularly decentralized current limiter 272.n for the n-th control 283 of the n-th switching means 63.
  • the output variables of the current limiter 270.1 and the further current limiter 272.1 are supplied redundantly to the control 281 via a coupling element 274.1 (in particular an OR connection).
  • a coupling element 274.1 in particular an OR connection.
  • the output variables of the nth current limiter 270. n and the further nth current limiter 272. n i.e.
  • the two auxiliary voltages in 137, 139 or driver voltages from the two supply paths 248, 250) are fed redundantly to the nth control 283 via an nth coupling element 274.
  • n in particular an OR connection.
  • the coupling element 274 can be designed as a connection or OR connection in the form of a double diode 274.1 (which connects the two supplied branches to one another via a diode) and can be fed to the control input of a sub-switching element.
  • the switch-on signal 104 controls the driver stage 256, which controls the supply of the respective drivers 67, 68, 69 with the auxiliary voltage 137.
  • the further switch-on signal 106 controls a further driver stage 266, which controls the supply of the respective drivers 67, 68, 69 with the further auxiliary voltage 139.
  • Two independent switch-on signals (“On”) 104, 106 which act as control signals on the respective driver stages 256, 266, enable them to individually control the conductive state of the switching element. tel 15, consisting of the individual switches 61, 62, 63, to maintain or activate, for example when starting the motor vehicle.
  • the design of the driver stage 256, 266 and/or the current limit(s) 254, 264; 270, 272 and/or the coupling element 274 ensures that any errors in the drivers 67, 68, 69 or in the controls 281, 282, 283 or the switching means 15 or the individual switches 61, 62, 63 (within a supply channel for supplying the respective output 66 for a safety-relevant consumer 16) or other components do not have a critical effect on the supply. Due to this lack of feedback, several, in particular more than just two, switches 61, 62, 63 can be safely supplied within a control unit with two auxiliary voltages 137, 139.
  • This freedom from feedback can be implemented either centrally (by corresponding current limits 254, 264 in the respective supply paths 248,250) and/or decentrally (corresponding current limits 270. n, 272. n) for each individual switch input or associated individual control 281, 282, 283 for the respective switch 61, 62, 63 and/or in a combination of central and decentralized current limits 252, 262; 270. n, 272. n.
  • the current limits 254, 264; 270. n, 272. n at least two central current limits 254, 264 (for each supply path 248, 250 or auxiliary voltage 137, 139) or n decentralized current limits 270. n, 272. n are required.
  • n can be selected individually, whereby at least one decentralized limit is necessary in order to protect errors in a switch 61, 62, 63 from passing through to the other n-1 switches 61, 62, 63.
  • the central current limit 254 (for the driver stage 256, 144) could be omitted, but then the local or decentralized current limit 270.1 and the local or decentralized current limit 270.n must be provided in order to provide at least one current limit for this path.
  • the decentralized current limits 272.1, 272.n can be omitted.
  • the driver stage 266 could be used as a pulse driver stage 146 (which serves for short-term activation) with the upstream central current limit. 264 (and not necessarily required decentralized current limitation 272.1 ,
  • the driver stage 256 could be designed as a maintenance driver stage 144.
  • the central current limit 254 upstream of the maintenance driver stage 144 can be dispensed with, but the decentralized current limits 270.1,
  • the switches 61, 62, 63 are each the components of the switching unit 15 within a channel (see Figure 1, where three channels are shown as an example).
  • a control unit or power distributor 18 several channels can be supplied with their own redundant drivers 67, 68, 69 or controls 281, 282, 283 from just two auxiliary voltages 137, 139.
  • the shutdown logic must ensure that no single error leads to an unintentional shutdown (change to the high-impedance state) of more than one switch 61, 62, 63 of the n+1 switching elements that are connected in parallel and each supply a channel or safety-relevant consumer 16 redundantly.
  • two independent shutdown signals (“Off”) 92, 108 are fed to an AND link 180. Only if both shutdown signals 92, 108 indicate a shutdown request (“Off”) is the opening of the switches 61, 62, 63 initiated. This means that a single error, for example in the case of redundant current detection, does not trigger shutdown of the safety-relevant consumer 16.
  • the switch-off request can be passed to the control 281, 282, 283 via respective decoupling elements 276 such as diodes.
  • the diode decoupling prevents errors in a partial switching element or switch 61, 62, 63 or driver 67, 68, 69 from triggering a switch-off of all other switches 61, 62, 63 (also in other channels). Errors in which single errors in a partial switching element or switch 61, 62, 63 prevent a switch-off of all other switches 61, 62, 63 represent a latent error at the overall system level and can be detected via latent error diagnostics.
  • the switch-off signal (output signal of the AND gate 180) is used to transfer the respective switches 61, 62, 63 (for example MOSFETs or IGBTs) to the blocked state.
  • the additional auxiliary voltage 139 can be supplied to the additional supply path 250 via an input.
  • the additional auxiliary voltage 139 is above the supply voltage 11b by a certain amount (such as the battery voltage 11b) and could be, for example, 24 V (with an exemplary battery voltage 11b of 12 V).
  • the switches 61, 62, 63 which are designed in particular as MOSFETs, are controlled via this driver voltage.
  • the system-immanent capacitance 349 between gate and source must first be charged.
  • the gate voltage in the form of the applied voltage 137, 139
  • the battery voltage llb to which the drain terminal of the MOSFET 61, 62, 63 is connected.
  • the activation of the controls 281, 282, 283 by supplying the additional auxiliary voltage 139 or driver voltage is carried out using the activation signal 104.
  • the base of a switching means 306 designed as a transistor is controlled via the activation signal 104.
  • the switching means 306 is connected to an RC element on the one hand and to ground on the other.
  • a further switching means 304 is activated via the RC element.
  • the further switching means 304 is also designed as a transistor.
  • the base of the further switching means 304 is activated by the switching means 306 via the RC element.
  • the further switching means 304 is controlled via the switch-on signal 104, the further auxiliary voltage 139, current-limited (current limitation 264), is in principle available at the output of the further switching means 304 and is fed to the controls 281, 282, 283 of the respective switches 61, 62, 63 via the associated coupling elements 274.
  • the pulse memory 255 which is formed from at least one capacitor, in the exemplary embodiment two capacitors connected in parallel, is supplied with energy via the battery voltage 11b.
  • the output of the pulse memory 255 is used to control the base connections of the transistors 301, 303 of the two branches of the power source.
  • the output is also connected to the transistor 301, which serves to generate the pulse current Ip, and is thus also connected to the input of the further switching means 304.
  • the control signal for the switching means 301 can be generated via the buffer 255, if necessary in conjunction with the supply voltage UO or the battery voltage 11b.
  • One potential of the buffer 255 designed as a capacitor or as a parallel connection of two capacitors, is at the supply potential such as the battery voltage 11b.
  • the other connection of the buffer 255 is contacted via a resistor with the base of the switching element 301 designed as a transistor and of the further switching element 303, which is also designed as a transistor.
  • the other connection of the buffer 255 is also connected to the output of the switching element 301, in particular to the collector of the transistor of the switching element 301.
  • the input or the collector of the switching means 301 designed as a transistor is contacted with the further connection of the current limiter 264. Both the output of the switching means 301 and the further connection of the buffer 255 contacted therewith are fed to the further switching means 304, in particular designed as a transistor, particularly preferably to the emitter of the transistor 304.
  • connection potential of the additional auxiliary voltage 139 feeds a constant current source serving as a central current limiter 264 via the supply branch 250.
  • the pulse memory 255 is slowly charged. Initially, a very small current flows between the emitter and base of the transistor 301 via the relatively high-ohmic resistor between the base of the transistor 301 and the pulse memory 255. This also causes a voltage drop across the negative feedback resistor between the connection for the auxiliary voltage 139 and the emitter of the transistor 301. From a certain voltage drop across this resistor, the current flows via the double diodes 345. This reduces the current at the base of the transistor 301.
  • the collector current on the transistor controlled by the base current namely the pulse current Ip (as the output current Ip of the pulse driver stage 146), is reduced accordingly.
  • a current source 254.3 acts as a current limiter 264. If a voltage of 0.7 V is applied to the resistor, the transistor 301 (and the transistor 303) are deactivated.
  • the associated circuit of the current limiting The auxiliary voltage 264 could be dimensioned in such a way that a maximum current of approximately 2.5 mA is achieved. This ensures that there is no interference with the additional auxiliary voltage 139 to a sufficient extent.
  • the buffer 255 is operated in conjunction with the further switching means 304 via the charge transfer of the buffer 255 like a pulse source for controlling the switching means or switching through the switching means 301, so that the further auxiliary voltage 139 is available to the controls 281, 282, 283 very quickly after the activation of the switch-on request 106 in order to switch on the switches 61, 62, 63 to ensure the supply of the safety-relevant consumer 16.
  • the capacitance of the buffer 255 is, for example, ten times greater than the junction capacitance of the switches 61, 62, 63 designed as MOSFETs and could, for example, be in the order of 1 pF.
  • the corresponding dimensioning of the circuit is correspondingly simple.
  • the further output of the further switching means 304 is electrically connected to a resistor (as a possible further decentralized current limitation) 272.1, 272.n and then to the respective coupling element 274.1, 274.n.
  • the further respective resistor(s) 272.1, 272.n is/are designed to have a relatively low resistance and is, for example, in the order of magnitude of 250 or 200 Q.
  • the relatively low resistance connection and corresponding buffering enable the switches 61, 62, 63 to be switched on quickly.
  • the resistors serve in particular for symmetrization, not primarily as a decentralized current limitation 272.1, 272,2, 272.n.
  • a current measurement 262 of the pulse current Ip is provided via a resistor 343.
  • the constant current source (as current limiter 264) and the current measurement 262 are constructed in such a way that the additional auxiliary voltage 139 reaches the diagnosis 268 via a branch (via an upstream resistor and a transistor 303) as a current mirror of the pulse current Ip.
  • This branch is dimensioned in such a way that a certain part of the flowing pulse current Ip is fed to the diagnosis 268, for example 1/7 Ip depending on the dimensioning of the resistors.
  • the pulse current Ip reaches the further switching means 304 and/or, if necessary, via the current limiter 272.1, 272.2, 272.3 or 272.n to the coupling element 274.1, 274.2, 274.n.
  • the current limiter is not limited to the current limiter
  • n is designed as an electrical resistance (for example in the order of 200 Ohm).
  • the current limit 272.1 is designed as an electrical resistance (for example in the order of 200 Ohm).
  • 272.2, 272.3 or 272.n serves to symmetrize the pulse current Ip with respect to the maintenance current le as described below.
  • the supply path 248 is supplied via the auxiliary voltage 137.
  • the switching means 300 arranged in the supply path 248 is optionally controlled or activated by the switch-on signal 106 via a further switching means 302.
  • the maintenance driver stage 144 is also switched on in parallel via an activation of the switching means 300.
  • the maintenance driver stage 144 is fed by the auxiliary voltage 137.
  • the auxiliary voltage 137 (like the further auxiliary voltage 139) is above the supply voltage 11b by a certain amount, particularly preferably in the order of 12 V above the supply voltage 11b.
  • the switching element 300 in particular a transistor, is activated via the switch-on signal 106 via the control input of the switching element 302, the output signal of which forms the control signal for the switching element 300, so that the auxiliary voltage 137 present at the input is switched through.
  • the maintenance current le (output current le of the maintenance driver stage 144) is impressed via a resistor and a transistor 305 via a first branch located at the output of the switching means 300.
  • the maintenance current le reaches the decentralized current limit 270.1, 270.2, 270.n for each control 281, 282, 283 or each switch 61, 62, 63.
  • the decentralized current limit 270.1, 270.2, 270.n is designed as an electrical resistor (for example in the order of magnitude of 10 k). After the respective decentralized current limitation 270.1, 270.2, 270.n, the current le passes via the respective coupling elements 274.1, 274.2, 274.3, 274.n to the respective control 281, 282, 283 for the associated switches 61, 62, 63.
  • the coupling element 174 is constructed, for example, from two diodes, which couple the two supplied inputs (the proportional pulse current Ip supplied via the output of the switching means 304 via the resistors 272.1, 272.2, 272. n; as well as the proportional maintenance current le supplied via the current limiter 270.1, 270.2, 270. n) to an output without feedback.
  • the diagnosis 268 can preferably in turn comprise a coupling element 341, consisting of two diodes, which combine the supplied proportional currents Ip, le into a single output for further evaluation.
  • the evaluation or recording of the currents le, Ip is carried out via the measuring resistor 343.
  • the output of the coupling element 341 is fed to the measuring resistor 343, whose other connection is connected to ground.
  • the respective switching means 321, 322, 323, which are preferably designed as transistors, are switched on when the switch-off signals 92, 106 match via a corresponding control of the Base is switched through so that the output of the associated coupling elements 274.1, 274.2, 274.n is pulled to reference potential 330 and thus there is no corresponding control of the switching means 61, 62, 63 in the sense of switching on.
  • the switching means 61, 62, 63 are therefore switched off.
  • the switch-off signals 92, 108 each control further switching means 308, 310 (for example controlled via the base of switching means 308, 310 designed as transistors). For example, several switch-off signals 108 (for example from different sources) could be combined and control the switching means 310.
  • the output signals of the correspondingly controlled switching means 308, 310 are fed to an AND connection 180.
  • the AND connection 180 comprises, for example, two further switching means 312, 314, preferably designed as transistors, which are connected in series and whose switching path can be acted upon by one of the auxiliary voltages 137, 139, in particular the further auxiliary voltage 139. If there are matching shutdown requests 92, 106, both switching means 312, 314 of the AND gate 180 are switched through, so that the additional auxiliary voltage 139 or driver voltage is present at the output of the AND gate 180.
  • the output signal of the AND link 180 is fed to a decoupling element 276, in the exemplary embodiment to two decoupling elements 276.
  • the decoupling element 276 comprises at least one diode, which is arranged between the output of the AND link 180 and the input of the respective control 281, 282, 283 in the forward direction.
  • the input signal of the decoupling element 276 can also be fed to the further control 282 via a further diode.
  • the output signal of the decoupling element 276 is fed to the control 281 (for the first switch 61) as well as to the control 282 (for the second switch 62).
  • the output signal of the AND link 180 is forwarded to the control 283 (for the third switch 63) via a further decoupling element 276.
  • the output signals of the respective decoupling elements 276 control the associated switching means 321 (for the control 281), switching means 322 for the control 282 and switching means 323 for the control 283. Accordingly they are each connected to the base of the switching means 321, 322, 323 designed as a transistor.
  • the output signal of the coupling element 274.1 is connected to the control 281 or to the transistor 321 and via a branching point to both the first switching means 61 and via a Zener diode 376 to the reference potential.
  • the output signal of the coupling element 274.2 is connected to the control 282 or to the transistor 322 and via a branching point to both the second switching means 61 and via a further Zener diode 376.2 to the reference potential.
  • the output signal of the coupling element 274.n is connected to the control 283 or to the transistor 323 and via a branching point to both the third or nth switching means 63 and via a further Zener diode 376.n to the reference potential. If there are matching shutdown requests 92, 108, the respective switching means 321, 322, 323 are controlled so that no more switch-on signals reach the switches 61, 62, 63 as described above. The switches 61, 62, 63 are then opened.
  • the power distributor 18 is arranged, for example, in a 12 V electrical system 13 in a motor vehicle directly at the interface between the non-safety-relevant sub-vehicle network 10 and the safety-relevant sub-vehicle network 11, in particular the ASI L-qualified sub-vehicle network 11.
  • the use is not restricted to this.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Control Of Voltage And Current In General (AREA)

Abstract

L'invention concerne un dispositif d'alimentation en énergie d'au moins un consommateur associé à la sécurité dans un véhicule automobile, au moins deux commutateurs (61, 62, 63) étant prévus pour fournir et protéger au moins une charge associée à la sécurité (16) ou une pluralité de charges associée à la sécurité (16), chacun des commutateurs (61, 62, 63) étant affecté à son propre dispositif de commande (281, 282, 283) pour commuter ledit commutateur (61, 62, 63) en fonction d'au moins un signal de commande (104, 106 ; 92, 108), comprenant au moins deux trajets d'alimentation indépendants (248, 250) pour alimenter le dispositif de commande (281, 282, 283), un trajet d'alimentation (248) comprenant un étage d'attaque (144, 256) qui est alimenté par une tension auxiliaire (137), l'autre trajet d'alimentation (250) comprenant un autre étage d'attaque (146, 266) qui est alimenté par une autre tension auxiliaire (139) qui est indépendante de la tension auxiliaire (137), au moins deux éléments de couplage (274) étant prévus pour combiner les variables de sortie des deux étages d'attaque (144 146 256, 266), chacun des éléments de couplage (274, 274.n) alimentant l'un des dispositifs de commande (281, 282, 283).
PCT/EP2023/084837 2023-02-21 2023-12-08 Dispositif d'alimentation en énergie d'au moins une charge associée à la securite dans un vehicule automobile WO2024175233A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102023201502.1 2023-02-21
DE102023201502.1A DE102023201502A1 (de) 2023-02-21 2023-02-21 Vorrichtung zur Energieversorgung zumindest eines sicherheitsrelevanten Verbrauchers in einem Kraftfahrzeug

Publications (1)

Publication Number Publication Date
WO2024175233A1 true WO2024175233A1 (fr) 2024-08-29

Family

ID=89164641

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2023/084837 WO2024175233A1 (fr) 2023-02-21 2023-12-08 Dispositif d'alimentation en énergie d'au moins une charge associée à la securite dans un vehicule automobile

Country Status (2)

Country Link
DE (1) DE102023201502A1 (fr)
WO (1) WO2024175233A1 (fr)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102019205800A1 (de) 2019-04-23 2020-10-29 Robert Bosch Gmbh Versorgungsnetzausgang und Verfahren zum Betreiben eines Versorgungsnetzes
DE102020107695A1 (de) 2020-03-19 2021-09-23 Audi Aktiengesellschaft Verfahren zum Konfigurieren eines Bordnetzes
DE102020117631A1 (de) * 2020-07-03 2022-01-05 Leoni Bordnetz-Systeme Gmbh Redundante Energieversorgung für autonome Fahrzeuge
DE102021118869A1 (de) * 2021-07-21 2023-01-26 Audi Aktiengesellschaft Bordnetz und Verfahren zu seinem Betrieb

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102019205800A1 (de) 2019-04-23 2020-10-29 Robert Bosch Gmbh Versorgungsnetzausgang und Verfahren zum Betreiben eines Versorgungsnetzes
DE102020107695A1 (de) 2020-03-19 2021-09-23 Audi Aktiengesellschaft Verfahren zum Konfigurieren eines Bordnetzes
DE102020117631A1 (de) * 2020-07-03 2022-01-05 Leoni Bordnetz-Systeme Gmbh Redundante Energieversorgung für autonome Fahrzeuge
DE102021118869A1 (de) * 2021-07-21 2023-01-26 Audi Aktiengesellschaft Bordnetz und Verfahren zu seinem Betrieb

Also Published As

Publication number Publication date
DE102023201502A1 (de) 2024-08-22

Similar Documents

Publication Publication Date Title
DE102012222208B4 (de) Verfahren zum gesteuerten Verbinden mehrerer Bordnetzzweige eines Fahrzeugs, Steuereinheit zur Ausführung des Verfahrens sowie Bordnetz
EP3669432B1 (fr) Appareil de coupure pour réseau de distribution électrique
DE102015107718B4 (de) Vorrichtung und Verfahren zum Absichern einer Bordnetz-Komponente eines Fahrzeug-Bordnetzes
EP2435279A1 (fr) Réseau de bord pour un véhicule ainsi que dispositif de commande pour un réseau de bord
EP3611056A1 (fr) Répartiteur de puissance électronique
WO2020216486A1 (fr) Sectionneur
DE102020208399A1 (de) Vorrichtung zur Absicherung insbesondere sicherheitsrelevanter Verbraucher in einem Kraftfahrzeug
EP4084249B1 (fr) Réseau embarqué; en particulier pour un véhicule automobile
DE102020208401A1 (de) Verfahren zur Absicherung insbesondere sicherheitsrelevanter Verbraucher in einem Kraftfahrzeug
DE102021130379A1 (de) Elektrisches fahrzeugsystem mit dualer versorgung und mit schutz von bewegungssteuerungskomponenten
DE10020141B4 (de) Bordnetzsystem
DE102020107695A1 (de) Verfahren zum Konfigurieren eines Bordnetzes
DE102018105826B4 (de) Elektrisches versorgungssystem und verfahren
DE102021204455A1 (de) Überstromschutzschaltung, Managementsystem und Bordnetz für ein Kraftfahrzeug
DE102018221201B4 (de) Kraftfahrzeug-Steuergerät mit mehreren Versorgungsanschlüssen für eine redundante Spannungsversorgung sowie Kraftfahrzeug mit dem Steuergerät und Verfahren zum Betreiben des Steuergeräts
EP3925835B1 (fr) Réseau embarqué pour un véhicule
WO2024175233A1 (fr) Dispositif d'alimentation en énergie d'au moins une charge associée à la securite dans un vehicule automobile
EP3820733B1 (fr) Dispositif de batterie multi-tension et réseau de bord pour un véhicule automobile
DE102023201504A1 (de) Vorrichtung zur Energieversorgung eines sicherheitsrelevanten Verbrauchers in einem Kraftfahrzeug
DE102016121447A1 (de) Vorrichtung und Verfahren zum Absichern einer Bordnetzkomponente eines Fahrzeug-Bordnetzes
DE102012211086A1 (de) Sicherheitselektronik für ein Batteriemodul, Batteriezellenüberwachungseinheit, Batteriesystem und Kraftfahrzeug
WO2020109134A1 (fr) La présente invention concerne un dispositif de coupure pour un système d'accumulateurs d'énergie électrochimiques comportant au moins un accumulateur d'énergie électrochimique ayant un premier et un second pôle de branchement ainsi qu'un premier et un second branchement de conducteur électrique, comportant un premier chemin de courant entre le premier pôle de branchement de l'accumulateur d'énergie électrochimique et le premier branchement de conducteur électrique avec un premier commutateur semi-conducteur, et un élément de coupure monté en série avec le premier commutateur semi-conducteur ; et un deuxième chemin de courant avec un deuxième commutateur semi-conducteur qui est relié électriquement au premier chemin de courant au moyen d'une première dérivation de courant entre le premier commutateur semi-conducteur et l'élément de coupure monté en série et le second pôle de branchement de l'accumulateur d'énergie ; et un troisième chemin de courant avec un troisième commutateur semi-conducteur, qui est relié électriquement au premier chemin de courant au moyen d'une seconde dérivation de courant entre l'élément de coupure et le premier branchement de conducteur électrique et le second pôle de branchement de l'accumulateur d'énergie électrochimique. par différents états de commutation des commutateurs semi-conducteurs, un cas de défaillance d'au moins un des commutateurs semi-conducteurs est détecté et, par le déclenchement de l'élément de coupure, l'accumulateur d'énergie électrochimique est séparé d'au moins un branchement de conducteur électrique.
WO2024179706A1 (fr) Dispositif et procédé d'alimentation d'une charge relative à la sécurité dans un véhicule automobile
EP3709513B1 (fr) Dispositif de commutation ainsi que procédé de fonctionnement d'un dispositif de commutation
DE102013003586A1 (de) Elektrisches Energieversorgungssystem für ein Kraftfahrzeug